Security Engineer

Varo is an entirely new kind of bank. All digital, mission-driven, FDIC insured and designed for the way our customers live their lives. A bank for all of us.

About The Role

We are looking for a Security Engineer to help secure our banking systems, automate our defenses, and protect our customers and employees. In this role, you will write code to automate compliance checks, manage our endpoint defense tools, hunt for phishing sites, and work directly with our financial crimes team to stop insider threats.

How You'll Make An Impact

• Automate Security Checks: Write and maintain Python scripts that automatically check if our security tools are installed and working properly on all company systems.
• Write Detections: Create and fine-tune alert rules to spot cyber threats and suspicious behavior before they cause harm.
• Manage EDR: Oversee and configure our Endpoint Detection and Response (EDR) platform to monitor and defend all company laptops, desktops, and servers.
• Track Down Phishing Sites: Use our external vendor tools to scan the internet, find fake websites mimicking our bank, and get them taken down.
• Stop Insider Threats: Partner directly with our financial crimes team to design, implement, and monitor safeguards against internal fraud and data theft.

The Skills And Experiences You'll Bring

• Python Programming: Strong ability to write and debug Python scripts to automate routine security tasks and connect different tools via APIs.
• EDR Experience: Hands-on experience managing and configuring an enterprise EDR platform (such as CrowdStrike, Defender, or SentinelOne).
• Detection Engineering: Experience writing security rules (such as Sigma, YARA, or SIEM-specific query languages) to detect malicious activity.
• Collaboration Skills: Ability to work clearly and effectively with non-technical teams, specifically when coordinating on fraud and insider threat investigations.
• Phishing Mitigation: Familiarity with brand protection or anti-phishing vendor platforms to find and report malicious domains.

For cash compensation, we set standard ranges for all US-based roles based on function, level, and geographic location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors as well as candidate experience and expertise and may vary from the identified range.

Varo is an equal opportunity employer. Varo embraces diversity and we are committed to building teams that represent a variety of backgrounds, perspectives, and skills. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

Beware of fraudulent job postings!

Varo will never ask for payment to process documents, refer you to a third party to process applications or visas, or ask you to pay costs. Never send money to anyone suggesting they can provide work with Varo. If you suspect you have received a phony offer, please e-mail [email protected] with the pertinent information and contact information.

Notice At Collection For Employees And Applicants

Varo Candidate Privacy Notice